coulomb/railiance-platform
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Pin the audit-core release that is actually deployed (b479801b) in the recovery preflight.

Browse source 
audit-core 1269a0e (2026-10-15) moved deploy/audit-core.yaml from the reviewed
ec15f63d image to b479801b; the live deployment and pod run b479801b, so every
preflight failed image_matches_reviewed_digest. The attest-chain CronJob stays
on ec15f63d and is not checked here.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 236506@bnt-lap001
Assistant-Session: 09087018-91e1-48c5-ab2f-acfbb62c92e4
This commit is contained in:
codex 2026-11-03 20:44:09 +01:00
parent 2a1587fc9b
commit 86eb45647c
1 changed files with 3 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

4
scripts/audit-core-recovery-preflight.py
View file

@ -20,9 +20,11 @@ from pathlib import Path
from typing import Any
# audit-core release pinned by audit-core 1269a0e (2026-10-15, deploy/audit-core.yaml);
# the previously reviewed ec15f63d image now remains only on the attest-chain CronJob.
EXPECTED_IMAGE = (
"forgejo.coulomb.social/coulomb/audit-core@"
"sha256:ec15f63d49226bfe507af2bc38ffbd5e83f549ba2c6d1ae7a338e7e053f34615"
"sha256:b479801b0bc76df66a36a85376c45aaf399c6d82feade9ba81430b774c4a8271"
)
EXPECTED_DB_KEYS = {"username", "password", "host", "port", "dbname"}